SocTool by Moe
Project levels.
Choose a level inside SocTool. Beginner, Intermediate, and Advanced are all active.
Beginner
Log explanation, Windows Event IDs, port context, IOC extraction, and SOC note building.
Open beginner toolsIntermediate
Suspicious command analysis, Sigma explanation, MITRE mapping, alert triage, and investigation timelines.
Open intermediate toolsAdvanced
Identity abuse analysis, attack-chain correlation, threat hunting, detection engineering, and incident response playbooks.
Open advanced tools